General Terms & Conditions

At a glance

Who we are. CASUS Technologies AG, Uraniastrasse 31, 8001 Zurich, Switzerland. Contact: contact@getcasus.com.

Who these Terms bind. You are our contracting party as “Customer”. The Customer can be a natural person subscribing in their own name (typically via our self-service sign-up) or an organisation such as a law firm, company or public institution. Where the Customer is an organisation, the individuals who log in (“Users”) access the Service under the organisation’s account. Where the Customer is a natural person, that person is both the Customer and the User.

What we offer. CASUS is an AI-powered legal productivity platform — a web application plus a Microsoft Word Add-in — designed for trained legal professionals to draft, review and work on documents.

AI is a draft tool, not a lawyer. Our AI features produce drafts and suggestions. Outputs are probabilistic and may be incomplete or inaccurate. You review and verify before relying on them.

Your data stays yours. You own what you upload and what the AI generates from it. We do not use Customer Data to train AI models. Details are in our Privacy Policy and our Trust Center at https://trust.getcasus.com.

Professional secrecy. Customers subject to statutory professional secrecy receive the universal assurances in Section 11 and, depending on the country of professional admission, the annex for Germany (§ 203 StGB / § 43e BRAO), Austria (§ 9 RAO / § 40 RL-BA 2015) or Switzerland (Art. 321 SCC / Art. 13 LLCA).

Free trial. 14 days free, no auto-conversion to a paid plan. If you do not subscribe, access ends.

Swiss law, Zurich courts. Swiss law applies. Disputes go to the ordinary courts of Zurich.

The full legal text below prevails over this summary if there is any inconsistency.

1. Scope

1.1 These General Terms of Service (“Terms”) apply to the access to, and the use of, the Services (as defined below) provided by CASUS Technologies AG, Uraniastrasse 31, 8001 Zurich, Switzerland (the “Company”, “CASUS”, “we”, “us”). The Services are made available on https://www.getcasus.com/ (the “Website”).

1.2 By registering for or using the Services, the user or entity (the “Customer”, “you”) accepts these Terms. The Customer may be either (a) a natural person subscribing in their own name, for example through our self-service sign-up, or (b) an organisation such as a law firm, company or public institution subscribing for the use of its employees, contractors or representatives. Where the Customer is an organisation, the person completing the registration or order represents that they are authorised to bind the organisation.

1.3 These Terms, together with any other documents referenced herein, form a legally binding agreement (the “Agreement”) between the Company and the Customer (each a “Party”, together the “Parties”). If the Customer does not agree to these Terms, the Customer may not use or access the Services.

1.4 Any differing or additional terms of the Customer (including general purchasing conditions) shall not become part of the Agreement unless the Company expressly agrees to them in writing.

2. Services

2.1 The Company offers an AI-powered legal productivity platform consisting of a web application and a Microsoft Word Add-in (collectively, the “Platform”). The Platform leverages large language model (“LLM”) technology to assist qualified legal professionals with tasks such as contract drafting, document review, clause comparison, legal research and related legal workflow activities (collectively, the “Services”).

2.2 The Platform is designed exclusively for use by trained legal professionals who exercise independent professional judgement in their work. It is not intended for, and shall not be used by, laypersons or non-professionals seeking legal advice or guidance.

2.3 The Services are available in different service tiers (each a “Tier”) with different feature sets. The available Tiers, their features and the applicable pricing are displayed on the Website and presented to the Customer during registration and subscription.

2.4 Upgrades to higher Tiers are possible at any time. Downgrades can only be carried out at the end of the then-current billing period.

2.5 The Company constantly develops and improves its Services and may modify or, either temporarily or permanently, stop providing any Service or any part of it at its sole discretion. In case of material changes to the Services — meaning changes significantly altering the nature and scope of the Services — the Company shall, where reasonably possible, notify the affected Customers in advance. If the Customer disagrees with a material change, the Customer may terminate the Agreement within one (1) month from the Company’s notice.

2.6 The Customer acknowledges and agrees that AI and machine-learning tools can produce results influenced by training data. Such outputs may contain inaccuracies, biases or similarities to existing works. The Company does not warrant that the output will be entirely free of such deficiencies.

2.7 The Company shall provide the Services on a best-effort basis, with reasonable skill, care and diligence. The Company does not warrant that any particular result or outcome will be achieved. The Services are advisory in nature, and recommendations do not constitute a guarantee of specific results.

3. Registration and Account

3.1 The Customer registers for the Services via the Website. The Customer may register one or more user accounts (each a “User”) for its employees and/or authorised representatives. Where the Customer is a natural person subscribing in their own name, that person is both the Customer and the User. References to the Customer include all Users.

3.2 Where applicable, the Customer shall designate one or more Users as administrator(s) (the “Admin Account”), who have the ability to configure the Services settings and manage permissions of other Users.

3.3 The Customer shall provide accurate, current and complete information during registration and keep their account information up to date. Accounts registered by bots or automated methods are not authorised and will be terminated.

3.4 The Customer is responsible for maintaining the confidentiality and security of their account credentials and shall not disclose them to any third party. The Customer is responsible and liable for all activities conducted through their account or any User’s account, and shall immediately notify the Company if there is any suspicion that credentials have been compromised.

3.5 Free registration is open to everyone.

3.6 Customers resident or established in Switzerland may purchase paid Services as businesses or as private consumers.

3.7 Customers resident or established outside Switzerland may purchase paid Services only as entrepreneurs or businesses, including within the meaning of § 14 BGB or § 1 KSchG or for professional or commercial purposes. Before a paid subscription is concluded, the Customer must provide a valid VAT identification number or UID, which the Company verifies through VIES/MIAS. No paid agreement is concluded without successful verification.

3.8 By purchasing a paid subscription outside Switzerland, the Customer confirms that it acts as an entrepreneur for professional or commercial purposes. Consumer-protection provisions, including withdrawal and cancellation rights, do not apply to that extent.

3.9 Cross-border B2B invoices are issued net of VAT and the tax liability shifts to the recipient under the reverse-charge mechanism.

4. Free Trial

4.1 A one-time, fourteen-day free trial (the “Free Trial”) is available to new Customers. The Customer may invite additional Users to collaborate in a shared trial environment; in that case, the Free Trial begins with the first registration and ends fourteen (14) days thereafter for all participants.

4.2 During the Free Trial, the Customer receives access to the functional scope of the Tier selected at registration, for evaluation purposes only. Certain features may be limited or disabled during the Free Trial.

4.3 The Free Trial ends automatically after fourteen (14) days and does not automatically convert into a paid Tier. An extension requires the Company’s prior written confirmation.

4.4 The Company will send a reminder at least two (2) days before the Free Trial expires. If the Customer subscribes to a paid Tier, access continues under that plan. If the Customer does not subscribe, all access terminates at the end of the Free Trial.

4.5 The Company reserves the right to verify eligibility for the Free Trial and to deny or terminate a Free Trial in case of misuse, fraud or any breach of these Terms.

5. Obligations of the Company

5.1 The Company will provide the Customer with the Services as agreed in the Agreement. The Company:

• shall provide the Services with reasonable care and skill, and shall use reasonable care in keeping the Services free from viruses and other malicious software;

• shall regularly carry out maintenance or improvements to the Services but does not warrant uninterrupted operation. The Customer acknowledges possible temporary delays. The Company shall inform the Customer about potential interruptions in advance where reasonably possible and, where feasible, schedule maintenance outside usual Swiss and Central European business hours;

• shall provide the Customer with reasonable support during business hours;

• may subcontract third parties for all its obligations under this Agreement and is liable for its subcontractors. The Company ensures that subcontractors are bound to appropriate confidentiality and data protection obligations;

• may suspend access to the Services upon reasonable determination of illegal or wrongful activity or fraudulent use. During suspension, the Customer remains liable for all charges incurred.

5.2 The Customer may provide feedback through forms, questionnaires and polls (“Feedback”). The Company may use, or not use, any such Feedback without any obligation to the Customer. The Customer assigns all rights in the Feedback to the Company.

6. Obligations of the Customer

6.1 The Customer shall be solely responsible for the use of the Services, including any use by its Users. To the extent permitted by applicable law, the Company assumes no responsibility for the Customer’s use of the Services.

6.2 The Customer remains solely responsible for the content, accuracy and legality of any data or information uploaded to or transmitted through the Services. The Company does not monitor such transmissions and accepts no liability in this respect.

6.3 The Customer shall:

• use the Services in compliance with the Agreement and all applicable laws;

• cooperate in the performance of this Agreement to the necessary extent;

• provide the Company with all necessary information and materials;

• inform the Company immediately if errors or faults occur and support the Company in the analysis and elimination thereof;

• designate a responsible contact person and ensure the availability of the contact person;

• check any data uploaded to the Services for viruses or other harmful components before entering it;

• verify, including through human review, the accuracy, reliability and appropriateness of the AI features for a particular use. For the avoidance of doubt, the Company is not a law firm and does not engage in the practice of law.

6.4 The Customer shall not:

• circumvent or attempt to circumvent any security protection of the Services;

• access the Services via any automated system or impose an unreasonable load on the Company’s infrastructure;

• decompile or reverse-engineer the Services or any part thereof, or derive the source code;

• copy, modify, distribute or otherwise use any information, text, graphics, images or software obtained from the Services;

• create derivative works based on the whole or any part of the Services;

• sell, sublicense or make the Services available to third parties;

• use knowledge of the Platform’s architecture, features or Confidential Information to design or develop a competing product.

6.5 If the provision of Services is delayed due to the Customer’s failure to comply with their duty to cooperate, the Customer shall bear the disadvantages and additional costs incurred.

7. Fees

7.1 The Customer shall pay the fees applicable to the selected Tier (the “Service Fees”) in accordance with the pricing displayed at the time of subscription, via the payment methods made available by the Company. Payments are processed via Stripe (Stripe Payments Europe Ltd. and affiliates).

7.2 Unless explicitly stated otherwise, all fees are in CHF and exclude VAT and other applicable taxes.

7.3 Recurring subscription fees are payable in advance (monthly or yearly, depending on the selected billing cycle). Invoices are due within thirty (30) days. Late payments bear interest at 5 % p.a.

7.4 If the Customer does not pay the applicable fees at the latest ten (10) days after notice of non-payment, the Company reserves the right to limit or suspend access to the Services. During suspension, the Customer remains liable for all charges incurred.

7.5 Except where prohibited by law, all fees are non-refundable.

7.6 The Company may change the fees in accordance with the Swiss Consumer Price Index. Any price changes will apply no earlier than thirty (30) days following notice to the Customer.

7.7 If the Customer disputes an invoice in good faith, the Customer shall notify the Company within the payment period. The Parties will seek to resolve the dispute. The Customer shall timely pay all undisputed amounts.

8. Intellectual Property

8.1 Each Party retains all rights, titles and interests to its own intellectual property, including all copyrights, inventions, trademarks, designs, domain names, know-how, trade secrets, data and other intangible property rights (the “Intellectual Property Rights”). All Intellectual Property Rights in the Services remain vested in the Company.

8.2 Where applicable and only to the extent necessary, each Party grants the other Party a limited, revocable, non-exclusive, non-transferable, non-sublicensable licence to the Intellectual Property Rights required to fulfil the Agreement.

8.3 As between the Parties, the Customer retains all rights in Customer Data (as defined in Section 9.1.1) and in the AI-generated outputs produced from it. The licence granted to the Company in respect of such data is strictly limited to what is necessary to provide, secure and support the Services and to comply with applicable law, and ends with the deletion of the relevant data in accordance with Section 9 and the Privacy Policy.

9. Data, Data Protection and Data Security

9.1 Customer Data and Usage Data

9.1.1 The Company may collect, generate and derive performance, analytical or usage data relating to the Customer’s access to or use of the Services (“Usage Data”). Usage Data will not include any data, text and any other works (collectively “Customer Data”) that the Customer submits, uploads or otherwise transmits through the Services.

9.1.2 The Company does not use Customer Data to train the artificial intelligence and/or machine-learning models underlying the Services, except where the Customer has provided prior written consent. This commitment extends to the AI subprocessors CASUS uses for inference, which operate under a zero-data-retention arrangement.

9.1.3 The Company will only use Usage Data for the performance of the Agreement, to monitor the performance and stability of the Services and to prevent or address technical issues. The Company may anonymise Usage Data, aggregate it and use that aggregated, anonymised data to improve its products and Services.

9.2 Data Protection

9.2.1 The Company collects and processes personal data as described in its Privacy Policy available at https://www.getcasus.com/privacy.

9.2.2 The Customer authorises the Company to use, process and store relevant personal data for the performance of the Agreement and to use anonymised data to improve its Services or for analysis purposes.

9.2.3 Where the Company processes personal data on behalf of the Customer in the course of providing the Services, it acts as processor (Auftragsbearbeiterin) within the meaning of Art. 28 GDPR and Art. 9 revFADP. The Company processes such personal data only on documented instructions from the Customer, which are set out in and given through this Agreement, the Privacy Policy and the configuration of the Services. Further information on roles, categories of data, sub-processors, international transfers and technical and organisational measures is set out in the Privacy Policy and in the Trust Center at https://trust.getcasus.com.

9.3 Data Security

9.3.1 The Company shall implement appropriate technical and organisational measures to protect Customer Data against unauthorised access, loss, destruction or alteration. The Company shall employ industry-standard security measures and review them regularly. A description of the applicable technical and organisational measures is available in the Privacy Policy and in the Trust Center.

9.3.2 The Company shall ensure that subcontractors who receive access to Customer Data are bound by data protection and data security obligations comparable to those set forth in this Agreement. The current list of subprocessors is maintained in the Trust Center.

10. Confidentiality

10.1 The Parties may disclose to each other confidential information (“Confidential Information”). Confidential Information includes, without limitation, any information which is marked as confidential or could reasonably be deemed confidential, such as organisational information, customer databases and functionalities and features of the Services.

10.2 Publicly available or accessible information, information lawfully and unrestrictedly received, or independently developed by the receiving Party, is not considered confidential.

10.3 Each Party undertakes to protect all Confidential Information that becomes accessible or known based on the Agreement. This confidentiality obligation remains in force even after the termination of the Agreement.

10.4 After termination or expiration of this Agreement, within sixty (60) days of request, each Party shall delete any Confidential Information of the other Party in its possession or control. Each Party may retain Confidential Information in accordance with its standard backup or record retention policies or as required by law.

11. Professional Secrecy / Attorney-Client Privilege

Note: This Section applies to Customers subject to statutory professional secrecy, in particular lawyers and their auxiliary persons. Depending on the Customer’s country of professional admission, the applicable Annex for Germany, Austria or Switzerland forms an integral part of the Agreement. On request, the Company will additionally confirm these assurances in writing and under signature.

11.1 The Company and all employees and auxiliary persons who may obtain access, in the course of their work, to content subject to the Customer’s professional secrecy are bound to strict and unconditional confidentiality towards everyone, beyond data-protection requirements. This obligation survives termination of the Agreement.

11.2 Company-side access restriction. Company-side access is restricted to the technically indispensable minimum. Only a small group of authorised persons may view content, and solely where necessary for troubleshooting, in accordance with the principle of least privilege. Those persons are bound under Section 11.1 and the applicable country Annex.

11.3 Infrastructure and AI subprocessors. Hosting and inference providers involved in automated processing have no human plaintext access to client-matter content. They are contractually bound as processors under Art. 9 revFADP / Art. 28 GDPR, operate under zero data retention, do not use Customer Content to train AI or ML models, do not retain it beyond the processing operation, and encrypt it in transit and at rest. Recognition as auxiliary persons under Section 11.1 is neither made nor required because no natural person at those subprocessors obtains knowledge of the secret.

11.4 If the Company exceptionally engages an additional subcontractor whose personnel can actually obtain plaintext access to content protected by professional secrecy, it will bind that subcontractor in text form, in advance, to the same obligations as Section 11.1 and the applicable country Annex.

11.5 The Company will notify the Customer without undue delay if an authority requests access to content protected by professional secrecy, insofar as legally permitted, and safeguards data control, return and deletion upon termination.

11.6 Upon written request, the Company will confirm compliance with these obligations in writing and under signature.

12. Liability and Indemnity

12.1 The Parties are fully liable to each other for wilful misconduct or gross negligence. Liability also remains unaffected for death, personal injury or damage to health and under mandatory law, including product-liability law. In all other cases, the Company’s liability is excluded to the maximum extent permitted by law.

12.2 The Company’s total aggregate liability to the Customer under or in connection with this Agreement shall not exceed 100 % of the total Service Fees paid by the Customer in the twelve (12) months preceding the event giving rise to the claim.

12.3 Neither Party shall be liable for any failure to perform its obligations (other than payment obligations) caused by circumstances beyond the Parties’ reasonable control (force majeure). The affected Party shall notify the other Party as soon as reasonably practicable and shall use reasonable efforts to mitigate the effects.

12.4 The Company shall, at its own cost, indemnify the Customer against any loss, damage, liability, claim or demand made by any third party arising out of: (i) breach of this Agreement or any legal regulation by the Company; (ii) any breach of the Company’s representations and warranties; or (iii) violation of the rights of a third party arising from the Company’s performance. The total indemnification obligation shall be subject to the liability cap set out in Section 12.2.

12.5 The Customer shall indemnify the Company against any third-party claims arising out of a breach of Section 6 (Obligations of the Customer) by the Customer or its Users, and shall reimburse the Company for the reasonable costs (including legal fees) of defending against such claims.

12.6 Where an essential contractual obligation is breached, the Company is also liable for ordinary negligence, limited to the loss that is typical for the Agreement and reasonably foreseeable. The cap in Section 12.2 remains applicable to the extent permitted by law.

13. Warranties and Representations

13.1 Subject to the mandatory liability cases and reservations in Section 12, the Customer acknowledges that the Services are provided “as is” and “as available”, and the Company makes no warranties or representations of any kind, whether express, implied, statutory or otherwise, including warranties of merchantability, fitness for a particular purpose, title and non-infringement.

13.2 The Company does not guarantee that the Services are error-free and will function without any interruption or disruption. Any further warranty is excluded.

13.3 The Services incorporate AI and large language model components whose outputs are probabilistic and may be incomplete, inaccurate or contextually inappropriate. The Company does not warrant that any particular result, legal conclusion or outcome will be achieved. All outputs are to be treated as draft materials or research aids only, subject to independent review and professional judgement by the Customer.

13.4 The exclusions in this Section 13 are subject to the mandatory liability cases and reservations in Section 12. In all other respects, probabilistic AI outputs remain provided on an as-is basis.

14. Marketing

14.1 Each Party is entitled to use the other Party’s name, logo and a brief description of the Services provided for advertising purposes on the Party’s website and other marketing or investment materials. Any other use — including case studies, quotes or detailed metrics — requires the prior written consent of the other Party. Either Party may object to the use of its name or logo at any time by written notice, in which case the other Party will remove the reference within thirty (30) days.

15. Term and Termination

15.1 The Agreement enters into force upon the Customer’s registration for a Free Trial or subscription to a Tier. The Agreement remains in full force and effect until its termination by either Party.

15.2 If the Customer begins with a Free Trial, the Agreement applies during the trial period. The Free Trial ends automatically as set out in Section 4.3. If the Customer upgrades to a paid Tier, the Agreement continues seamlessly.

15.3 If the Customer subscribes directly to a paid Tier, the Agreement continues for the selected billing period (the “Initial Term”), starting on the date the subscription is confirmed.

15.4 Unless terminated in accordance with these Terms, the Agreement shall automatically renew for successive periods of the same duration (each a “Renewal Term”) under the conditions and Service Fees applicable at the time of renewal.

15.5 Either Party may terminate the Agreement with immediate effect if the other Party is in material breach and fails to remedy this violation within fourteen (14) days from notice in text form. This includes, in particular, the Customer’s failure to pay on time or the start of insolvency procedures.

15.6 In all other cases, either Party may terminate by notifying the other Party in written form with a notice period of thirty (30) days towards the end of the Initial Term or Renewal Term, as applicable.

15.7 Termination shall not affect any rights or obligations that have accrued prior to the effective date of termination or that by their nature are intended to survive termination, including payment obligations incurred up to the effective date.

16. Miscellaneous

16.1 Entire Agreement. This Agreement is the entire agreement, and supersedes all prior agreements, between the Parties relating to the scope of this Agreement.

16.2 Amendments. Amendments and supplements to this Agreement must be made in writing.

16.3 Notices. Unless written form is explicitly required, notices can be made in text form. Notices to the Company shall be sent to contact@getcasus.com; notices to the Customer shall be sent to the last communicated or available email address, or through the Services.

16.4 Severability. If any provision of this Agreement is held to be illegal, invalid or otherwise unenforceable, the other provisions will remain mutatis mutandis in full force and effect, and the invalid provision will be replaced by a valid provision that comes as close as possible to the economic purpose of the original.

16.5 Independent Contractors. The Parties are independent contractors. Nothing in this Agreement shall be construed to create a partnership, joint venture, agency or employment relationship.

16.6 Third-Party Links. The Services may contain third-party content or links. The Company does not assume any responsibility for third-party content or websites.

16.7 No Assignment. The Customer may not assign any of its rights, obligations or claims under this Agreement without the prior consent of the Company. The Company may assign this Agreement to an affiliate or in connection with a merger, acquisition or sale of all or substantially all of its assets.

16.8 Order of Precedence. In the event of a conflict between the components of the Agreement, unless expressly stated in writing, the order of precedence is: (i) any individually negotiated written Amendment, (ii) these Terms, (iii) the Privacy Policy.

16.9 Form Requirements. Written form requires wet-ink, qualified or simple electronic signature (such as DocuSign). Text form includes electronic text, such as e-mail or notifications through the Services.

16.10 Language. These Terms are available in English and German. If a CASUS-provided translation differs from the English version, the English version prevails, except where mandatory law of the Customer’s jurisdiction requires otherwise.

16.11 Governing Law and Jurisdiction. This Agreement is governed by substantive Swiss law (excluding its conflict-of-laws rules and the United Nations Convention on Contracts for the International Sale of Goods, CISG) and subject to the exclusive jurisdiction of the ordinary courts of Zurich, Switzerland.

17. Contact

For any question, concern or notice regarding these Terms or the Services:

CASUS Technologies AG
Uraniastrasse 31
8001 Zurich
Switzerland
contact@getcasus.com

Country Annexes — Professional Secrecy

For Customers subject to statutory professional secrecy, the Annex corresponding to the country of professional admission applies in addition to Section 11.

Germany Annex — Confidentiality Agreement for Persons Subject to Professional Secrecy

This Annex supplements the data processing agreement under Art. 28 GDPR and accounts for § 43e BRAO and § 203 StGB. It applies in addition to and independently of data-protection law and is concluded in text form within the meaning of § 126b BGB.

(1) The Company acknowledges that Customer Data is subject to lawyers’ professional duty of confidentiality under § 43a(2) BRAO and § 2 BORA and is protected by criminal law under § 203 StGB.

(2) The Company is bound to confidentiality as a participating person within the meaning of § 203(3) sentence 2 StGB and § 43e BRAO. It instructs the employees who may view content under Section 11.2 about the criminal consequences of a breach under § 203 StGB.

(3) Access is limited to the technically indispensable minimum and solely for troubleshooting. Infrastructure and AI subprocessors have no human plaintext access. Any additional subcontractor with plaintext access is further bound in text form under § 43e(3) no. 3 BRAO.

(4) Where parts of the Services, in particular AI inference, are performed abroad, the Company ensures a level of secrecy protection comparable to German law under § 43e(4) BRAO. Inference currently takes place in Belgium, Sweden and Switzerland without human plaintext access and under zero data retention.

(5) The obligation applies towards everyone and survives termination.

Note: CASUS provides general drafting and review infrastructure across matters, not matter-specific individual functions. Client consent under § 43e(5) BRAO is therefore not required.

Austria Annex — Confidentiality Agreement for Persons Subject to Professional Secrecy

This Annex accounts for § 9 RAO, § 157 StPO and § 40 RL-BA 2015 and supplements the data processing agreement under Art. 28 GDPR / DSG.

(1) The Company acknowledges that Customer Data is subject to lawyers’ duty of confidentiality under § 9 RAO and to the anti-circumvention rules in § 9(3) RAO and § 157(2) StPO, which expressly cover information stored on data carriers.

(2) The Company and those employees who may view content under Section 11.2 are demonstrably and contractually bound to confidentiality under § 40(2) RL-BA 2015, including every form of electronic data processing.

(3) Access is limited to the technically indispensable minimum for troubleshooting. Infrastructure and AI subprocessors have no human plaintext access. The Company carefully selects its auxiliary persons and assures state-of-the-art technical and organisational measures under § 40(3) RL-BA 2015.

(4) The Company will notify the Customer without undue delay of an official seizure, search or other authority access under § 40(3) no. 3 RL-BA 2015, insofar as legally permitted.

(5) The Company informs the Customer of the categories of subcontractors used under § 40(3) no. 5 RL-BA 2015.

(6) The obligations apply towards everyone and survive termination.

Switzerland Annex — Attorney-Client Privilege (Art. 321 SCC / Art. 13 LLCA)

(1) The Company and those employees who may obtain access under Section 11.2 to content subject to attorney-client privilege are recognised as auxiliary persons of the lawyer under Art. 321 SCC and are subject to professional secrecy under threat of the penalties in Art. 321 SCC.

(2) Access is limited to the technically indispensable minimum for troubleshooting. Infrastructure and AI subprocessors have no human plaintext access and are therefore not recognised as auxiliary persons; their involvement does not breach attorney-client privilege because no natural person at the subprocessor obtains knowledge of the secret.

(3) The Company supports the Customer in preserving professional secrecy under Art. 13 LLCA and follows the Swiss Bar Association guidance on IT outsourcing and cloud computing.

(4) Where the Company processes personal data on behalf of the Customer, Art. 9 revFADP applies; disclosures abroad are made only in accordance with Arts. 16 and 17 revFADP.

(5) The Company notifies the Customer without undue delay of authority access requests, where permitted, and safeguards data control, return and exit, including precautions under Art. 211 DEBA.

(6) Written confirmation of compliance is provided on request.